Description

This process consists in receiving notifications of new workforce hires and assuring the new workforce member will be fully operational when she arrives by provisioning all identities and accesses.

Value Propositions

• Productivity

• Security

• Compliance

• Accountability

Workflow Roles

• Requester

• Approver(s)

Triggers

• Recruitment

• Contracting

• M&A

Inputs

• Joiner Identity

• New Job

• Arrival Date

• Manager

• Miscellaneous Requirements

Timeline

• Announcement

• Before Arrival

• Arrival

• After Arrival

• Completion

Key Activities

• Workflow

• Background Check

• Id Proofing

• Create Id Attributes

• Propagate Id Attributes

• Knowledge Transfer

• Grant Physical Access

• Birth Rights

• Grant New Job Accesses

• SoD & Toxic Rights

• Role Engineering

• Smooth Transition

• Resource Allocation

• Deliver Hardware

Related Risks

• Productivity loss caused by new workforce members that are not fully operational

• Privilege Abuse enabling fraud or Cyber-sabotage.

Modes

• Planned Joiner: This is the default mode in contrast with the Immediate Joiner mode. It takes place when the joiner is announced early enough for the normal process to take place. Acceptable delays for planned joiner should be documented in the IAM Workforce Policy.

• Immediate Joiner: This is an exceptional mode in contrast with the Planned Joiner mode. This mode takes place when the organizational circumstances are such that the joiner cannot be announced within expected delays and takes place immediately or faster than normally expected. In this mode, the pressing urgency of the situation may lead to errors, inefficiencies, and/or security issues. A mature process should be able to cope with this mode and implement adequate controls to correct errors and security issues.

• First Joiner

• Rejoiner

Outputs

Main Output

• Provisioned Identities and Accesses

Alternative Outputs

Key Indicators

• OM-IND-0029: Joiner Process Average Lead Time per Period (Indicator)

Version

1.1 Draft

TODO

Process Map

IAM Process Map

Parent Process

Workforce Identities Lifecycle Management

Sub-Processes

Workforce Rejoiner

Workforce Planned Joiner

Workforce Immediate Joiner